Behavioral task
behavioral1
Sample
139f3183a60c72851f1a70205e3dcece_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
139f3183a60c72851f1a70205e3dcece_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
139f3183a60c72851f1a70205e3dcece_JaffaCakes118
-
Size
270KB
-
MD5
139f3183a60c72851f1a70205e3dcece
-
SHA1
3e7a85267eeee39e44b22fcf1b43386701204818
-
SHA256
a53e66a9d9023912aef48db81a15168db1fc02e52e12677a1bba10dae04fd556
-
SHA512
ef754f79b82b7764125a5e8425b6d2fa0432ea121f26b6d953b8d4517078cfba7617f84c9a0c67fa87110653ee57e10c324acb3ee17d2f7a9492d35cc87cb740
-
SSDEEP
768:tuKMSEmjDbqrNM9Ia/iA3xOhEfdPmZF0sE:tdMSgNM9PnB+EfdeFJ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 139f3183a60c72851f1a70205e3dcece_JaffaCakes118
Files
-
139f3183a60c72851f1a70205e3dcece_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
UPX0 Size: 6.4MB - Virtual size: 6.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE